CVE-2021-43548
Assigner: icscert
Published: 2021-11-18T00:00:00
State: PUBLISHED
affected: product: Patient Information Center iX (PIC iX)
vendor: Philips
versions: status: affected
version: C.02
status: affected
version: C.03
credits: value: Younes Dragoni, Andrea Palanca and Ivan Speziale of Nozomi Networks
datePublic: 2021-11-18T00:00:00
descriptions: value: Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-20
description: CWE-20 Improper Input Validation
type: CWE
source: advisory: ICSMA-21-322-02
discovery: UNKNOWN
title: Philips Patient Information Center iX (PIC iX) and Efficia CM Series Improper Input Validation
x_generator: engine: Vulnogram 0.0.9